Ppp Authentication/Accounting/Authorization With Tacacs Servers - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
[3Com-luser-telnet] password simple huawei
[3Com] domain system
[3Com-isp-system] scheme local
Telnet users use usernames in the "userid@system" format to log onto the network and
are to be authenticated as users of the system domain.

2.6.3 PPP Authentication/Accounting/Authorization with TACACS Servers

I. Network requirements
Configure the router to use a TACACS server to assign IP addresses and provide
authentication, accounting, and authorization services to login PPP users (see the
following figure).
Connect the router to one TACACS server (providing the services of authentication,
authorization, and accounting) with the IP address 10.110.91.146. On the router, set
the shared key for authentication, authorization, and accounting packet encryption to
"expert". Configure the router to send usernames to the TACACS server with isp-name
removed.
On the TACACS server, set the shared key for encrypting the packets exchanged with
the router to "expert"; add the usernames and passwords of PPP users.
II. Network diagram
PPP user PPP user
Figure 2-9 Configure remote PPP user authentication with HWTACACS
III. Configuration procedure
# Configure a HWTACACS scheme.
[3Com] hwtacacs scheme hwtac
[3Com-hwtacacs-hwtac] primary authentication 10.110.91.146 1812
[3Com-hwtacacs-hwtac] primary authorization 10.110.91.146 1813
[3Com-hwtacacs-hwtac] primary accounting 10.110.91.146 1814
Chapter 2 AAA and RADIUS/HWTACACS Protocol
e1/0/0: e1/0/0:
10.110.91.160 10.110.91.160
PSTN PSTN
s0/0/0: s0/0/0:
188.188.188.2 188.188.188.2
3Com Corporation
2-41
Authentication/authorization/ Authentication/authorization/
accounting servers accounting servers
( IP address:10.110.91.146) ( IP address:10.110.91.146)
Intranet Intranet
Configuration